In the Claims 



Claims remain as follows: 

1. {previously presented) A method of controlling one of a plurality of 
middleboxes in a communications network, each of the middleboxes being 
connected to a plurality of entities in a respective one of a plurality of address realms 
of the communications network, said method comprising the steps of: 

(i) receiving a control message at a middlebox-identity-providing node in 
the communications network, said control message comprising information 
about one of the entities in the communications network; 

(ii) using the middlebox identity providing node to determine the identity of 
a first middlebox connected to said one entity in its respective one of the 
plurality of address realms; 

(iii) sending said identity to a middlebox control node in the 
communications network in order to enable said middlebox control node to 
send middlebox control messages to said first middlebox, said middlebox 
control node being located in a different address realm than that of said one of 
the entities; 

and wherein the middlebox-identity-providing node is separate from the middlebox 
control node and is located in a control signal path from said one of the entities to the 
middlebox control node. 

2. (original) A method as claimed in claim 1 wherein said step (iii) of sending 
said identity comprises adding said identity to a control message and sending said 
control message. 

3. (original) A method as claimed in claim 2 wherein additional information is 
also added to the control message. 
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4. (original) A method as claimed in claim 2 wherein said control message is a 
session description protocol (SDP) message. 

5. (original) A method as claimed in claim 4 wherein said identity is added to an 
SDP message using a pre-specified SDP attribute. 

6. (previously presented) A method as claimed in claim 1 wherein said control 
message is a call set-up message and said method further comprises sending 
middlebox control messages to said first middlebox in order to set-up a call from said 
one entity to another entity connected to a second middlebox in the communications 
network. 

7. (original) A method as claimed in claim 6 wherein said second middlebox is 
connected to a plurality of entities in a second address realm different from the first 
address realm of the entities connected to the first middlebox. 

8. (original) A method as claimed in claim 7 wherein the middlebox control node 
is within a third address realm different from the first and second address realms. 

9. (original) A method as claimed in claim 8 wherein the third address realm is 
public. 

10. (original) A method as claimed in claim 9 wherein the first and second 
address realms are private. 

11. (previously presented) A method as claimed in claim 1 wherein the 
middlebox-identity-providing node is selected from: one of the middleboxes; a 
gateway in the communications network; said one entity, being a user terminal in the 
communications network; and a gateway comprising a business services channel 
manager (BSCM). 
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12. (original) A method as claimed in claim 6 wherein said call passes through 
two or more middleboxes and wherein information about the identity of each such 
middlebox is added to said control message. 

13. (original) A method as claimed in claim 1 wherein said middlebox control 
node is a MIDCOM agent. 

14. (cancelled). 

15. (original) A method as claimed in claim 1 wherein each of the middleboxes is 
selected from a firewall, a network address translator (NAT), and a quality of service 
device. 

16. (original) A method as claimed in claim 1 wherein said middlebox-identity- 
providing node is arranged to determine the identity of the first middlebox by using 
pre-specified information. 

17. (original) A method as claimed in claim 1 wherein said middlebox-identity- 
providing node is arranged to determine the identity of the first middlebox by 
automatically analysing the communications network 

18. (previously presented) A communications network comprising: 

(i) a plurality of middleboxes, each connected to a plurality of entities in a 
respective one of a plurality of address realms of the communications 
network; 

(ii) a middlebox-identity-providing node arranged to receive a control 
message comprising information about one of the entities and to determine 
the identity of a first middlebox connected to said one entity in its respective 
one of the plurality of address realms; 

(iii) a middlebox control node arranged to receive the determined identity of 
the first middlebox in order to enable said middlebox control node to send 
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middlebox control messages to said first middlebox; said middlebox control 
node being located in a different address realm than that of said one of the 
entities, said middlebox-identity-providing node being separate from the 
middlebox control node and being located in a control signal path from said 
one of the entities to the middlebox control node. 

19. (original) A communications network as claimed in claim 18 wherein said 
middlebox-identity-providing node is further arranged to send said determined 
identity to the middiebox control node as part of a control message. 

20. (original) A communications network as claimed in claim 19 wherein said 
control message is a session description protocol message. 

21-22. (cancelled) 

23. (original) A middlebox control node arranged to control a plurality of 
middleboxes in a communications network, said middlebox control node comprising: 

(i) an input arranged to receive a control message comprising information 
about the identity of one of the middleboxes; 

(ii) a processor arranged to issue messages to the identified middlebox in 
order to control it; such that in use the middlebox control node is able to 
control the identified middlebox without the need to maintain its own store of 
information about the identities of the middleboxes and without the need to 
maintain its own discovery mechanism to discover the identities of the 
middleboxes. 

24. (previously presented) A middlebox-identity-providing node for use in a 
communications network comprising a plurality of middleboxes, said middlebox 
identity providing node comprising: 



5 



(i) an input arranged to receive a control message comprising information 
about one of a plurality of entities in the communications network; 

(ii) a processor arranged to determine the identity of a first middlebox 
connected to said one entity in a respective one of a plurality of address 
realms; 

(iii) an output arranged to send said identity to a middlebox control node in 
the communications network, said middlebox control node being located in a 
different address realm than that of said one of the entities; and wherein said 
middlebox-identity-providing node is arranged to be located in a control signal 
path from said one of the entities to the middlebox control node. 

25. (previously presented) A computer readable medium comprising program 
instructions arranged to control a middlebox control node, said middlebox control 
node comprising an input arranged to receive a control message comprising 
information about the identity of one of the middleboxes; and a processor arranged 
to issue messages to the identified middlebox in order to control it; such that in use 
the middlebox control node is able to control the identified middlebox without the 
need to maintain its own store of information about the identities of the middleboxes 
and without the need to maintain its own discovery mechanism to discover the 
identities of the middleboxes; 

the computer program comprising program code executable by the processor 
in order to enable the middlebox control node to: 

receive a control message comprising information about the identity of 
one of the middleboxes; and to 

issue messages to the identified middlebox in order to control it. 

26. (cancelled) 
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27. (previously presented) A computer readable medium comprising program 
instructions arranged to control a middlebox-identity-providing node, said middlebox 
identity providing node comprising an input arranged to receive a control message 
comprising information about one of a plurality of entities in the communications 
network; a processor arranged to determine the identity of a first middlebox 
connected to said one entity in a respective one of a plurality of address realms; and 
an output arranged to send said identity to a middlebox control node in the 
communications network, said middlebox control node being located in a different 
address realm than that of said one of the entities; and wherein said middlebox- 
identity-providing node is arranged to be located in a control signal path from said 
one of the entities to the middlebox control node; 

the computer program comprising program code executable by the processor 
in order to enable the middlebox identity-providing node to: 

receive a control message comprising information about one of a 
plurality of entities in the communications network; 

determine the identity of a first middlebox connected to said one entity; 

and 

send said middlebox identity to a middlebox control node in the 
communications network. 

28. (cancelled) 

29. (previously presented) A method ad claimed in claim 1, wherein the first 
middlebox is arranged to act as two or more independent middleboxes and wherein 
the step of providing the identity of the first middlebox to the middlebox control node 
comprises providing the identity of the first middlebox and the identity of a particular 
middlebox functionality relating to one of said two or more independent middleboxes 
that is to be used. 
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30. (previously presented) A method as claimed in claim 1, wherein the 
middlebox identity providing node uses a discovery algorithm to automatically obtain 
information about the identity of middleboxes in the communications network. 

31. (previously presented) A method as claimed in claim 1, wherein the 
middlebox identity providing node uses a discovery algorithm to automatically obtain 
information about the identity of middleboxes in the communications network prior to 
one of the receiving and determining steps. 



